{"as_of":"2026-08-08T12:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:55ba40587555ea05d988d67af19c8fc7bda7702a54e79e0b9514ad95c5a741e7","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:30:14.284471Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.05446/citation-record","integrity":"/paper/2506.05446/integrity","json":"/paper/2506.05446/citation-record.json","paper":"/paper/2506.05446"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.099533Z","title":"Is your prompt safe? investigating prompt injection attacks against open-source llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.099533Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:56cea297f74042424cabae98a5a5d37b1378190370222e55353fbc08359c3a0b","observation_id":"a785b5d6-6afa-49e3-9432-b1f43fa1d222","resolution":{"observed_at":"2026-08-07T10:30:14.099533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.887193Z","title":"alespalla/chatbot_instruction_prompts dataset","venue":null,"work_id":"4cb38daa-7e49-4f40-9c8d-e395eee0fcf3","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.105367Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:1f5b8740ba220ac5c8bc7eb7ec3952ab6270b57a8141456bdefd506662891ce8","observation_id":"15597410-5c50-47e9-8d40-068e0e986daf","resolution":{"observed_at":"2026-08-07T10:30:14.892925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.117185Z","title":"Evolving security in llms: A study of jailbre ak attacks and defenses","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.117185Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:3fbb78ae0f4d958a3eab5c4a40a2ba410a1f930d8eef6459c46563bd6ed6b515","observation_id":"f47547fc-3f27-40c9-9dd2-5708ded66ad9","resolution":{"observed_at":"2026-08-07T10:30:14.117185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.855629Z","title":"answerdotai/ModernBERT-large model card","venue":null,"work_id":"357ad0c8-10e4-4aef-b5ac-7798596ae3ef","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.122750Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:c07284e3e9e25511fb4ceb36a1e26377349295746eac261fb357b2dc16975d6f","observation_id":"8f83d42f-7862-433c-867d-d70730f10bfa","resolution":{"observed_at":"2026-08-07T10:30:14.860773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.839962Z","title":"Flashattention: Fast and memory- efficient exact attention with io-awareness","venue":null,"work_id":"7170c7c7-a002-41cf-b5f9-522c4041df9f","year":2022},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.135391Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:e49eb74f72538321106a6837a38f4dd78c49fa07d5a611a4fb6ddec0da48901c","observation_id":"a618e34b-a73e-4327-9a65-031e645524c2","resolution":{"observed_at":"2026-08-07T10:30:14.844961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.823057Z","title":"deepset/prompt-injections dataset","venue":null,"work_id":"faa5cb10-b772-4ee3-adae-750b9d690009","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.140855Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:cf35f9d6cab83ca000ab30cb5617ca8b6e9e66c15c42fd173ba757039ea38895","observation_id":"ca1fc77a-b177-44a1-8e02-0aa8bc01023e","resolution":{"observed_at":"2026-08-07T10:30:14.828105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.807454Z","title":"Not what you’ve signed up for: Compromising real-world llm-integra ted applications with indirect prompt injection","venue":null,"work_id":"04e1d6be-6854-473f-a580-bacf79e31ba1","year":2023},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.151227Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:df9c90fefb98e305fb20bf445f0a6f39c1926b0fc22185d744f58a629f6aa043","observation_id":"36cf2831-847b-4747-ad85-25283424681c","resolution":{"observed_at":"2026-08-07T10:30:14.812551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.791041Z","title":"Deberta: Decoding-enhanced bert with disen- tangled attention","venue":null,"work_id":"6383d6a0-9b73-4fc8-9e39-140920dc732e","year":2021},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.156957Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:8896cb8f767190d4cd022fd265870dc3f11b2b54144b4833b99e2acdb162b80d","observation_id":"eeb39c1a-fb04-4026-b632-0780350dc5ae","resolution":{"observed_at":"2026-08-07T10:30:14.797034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18510","last_updated":"2024-06-26T17:31:22Z","snapshot_observed_at":"2026-08-07T07:51:30.753226Z","submitted_at":"2024-06-26T17:31:22Z","title":"WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18510","snapshot_observed_at":"2026-08-07T10:30:14.174388Z","title":"Wildtea ming at scale: From in-the-wild jailbreaks to (adversarially) safer language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.174388Z"},"links":{"cited_paper":"/paper/2406.18510","citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:0325b209b19c2e43116b9bd33231f3bd09d968d434f34247093c562ab8c72da9","observation_id":"87ecb4d9-9701-4136-98fa-3776bfe3a296","resolution":{"observed_at":"2026-08-07T10:30:14.174388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.757194Z","title":"lmsys/toxic-chat dataset","venue":null,"work_id":"b960074b-fafd-410c-9a43-1f915355a125","year":2023},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.180653Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:5057eb87908421ff715711c06e53b04c2759e2a7272c7323270f301b70d7eaca","observation_id":"1b60db51-a348-4dd8-ab54-2d3f1058cce3","resolution":{"observed_at":"2026-08-07T10:30:14.762653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.773935Z","title":"jackhhao/jailbreak-classification dataset","venue":null,"work_id":"0852627c-4915-4e52-8dea-7d040b2b5ba8","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.164280Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:9b3b070e8a347b2edbe0f24f560c43d31a9efeffa1d6990d3f92addbc65986c6","observation_id":"5493f8f4-21d2-423c-86b0-29dea653c5d1","resolution":{"observed_at":"2026-08-07T10:30:14.780233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-07T10:30:14.208816Z","title":"Perez and I","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.208816Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:5f13137462d9703c268460675e5478ebcf4d8a94bd6a122514a7e35e6109fe6b","observation_id":"19c8f7a4-be45-4a0b-9f1e-11bfd713d954","resolution":{"observed_at":"2026-08-07T10:30:14.208816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.701586Z","title":"protectai/deberta-v3-base-prompt-injection model card","venue":null,"work_id":"cec43165-51fe-440c-9f70-be03365aa16d","year":2023},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.214221Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:c9c0e24a27e680e16f6f69ac223d4be84e724f17699d7892543ccb49f4784421","observation_id":"c5219a31-1cc0-4868-8f1b-5401e327c0a6","resolution":{"observed_at":"2026-08-07T10:30:14.707546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.737341Z","title":"microsoft/orca-agentinstruct-1M-v1 dataset","venue":null,"work_id":"1c81b86a-791a-4cff-b284-7df7c8366188","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.186071Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:068388fac7730907c2f5ee55390644c1c81659d60510edc3bd8b6a52e6a08277","observation_id":"466162a8-1efb-4875-95f0-ff871ed7fc01","resolution":{"observed_at":"2026-08-07T10:30:14.743259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.719913Z","title":"OpenSafetyLab/Salad-Data dataset","venue":null,"work_id":"4d5f4f41-cd0c-428f-b088-2485a74ba6d0","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.197333Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:a9572fa59e3c0a995ffa9dfd869571d400a249d21737412fa629930693ec671d","observation_id":"9adac95b-f1e8-4e6f-8224-760702f8c631","resolution":{"observed_at":"2026-08-07T10:30:14.725493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.593936Z","title":"Do Anything Now","venue":null,"work_id":"c73cf897-39e3-44e6-b06d-e74d6da2324a","year":2024},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.257740Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:042e9cd8baf0d227426ffc74d79928f921384177dca15071a3f67d8b0309f6aa","observation_id":"4f2b431c-f6ca-4663-aa5d-53dde6c066b0","resolution":{"observed_at":"2026-08-07T10:30:14.599732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.09864","last_updated":"2023-11-08T13:36:32Z","snapshot_observed_at":"2026-07-06T11:01:58.137141Z","submitted_at":"2021-04-20T09:54:06Z","title":"RoFormer: Enhanced Transformer with Rotary Position Embedding","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.09864","snapshot_observed_at":"2026-08-07T10:30:14.263630Z","title":"Roformer: Enhanced transformer with rotary position embedding","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.263630Z"},"links":{"cited_paper":"/paper/2104.09864","citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:11ecf5f2a4af50e9e9762eb18aebbd5bf8feaf2b2f3163924a1bb4988c5b63dd","observation_id":"f5e13ef1-37ee-4912-b75c-db6dbf3a108c","resolution":{"observed_at":"2026-08-07T10:30:14.263630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.684768Z","title":"protectai/deberta-v3-base-prompt-injection-v2 model card","venue":null,"work_id":"bb332f6d-ebf9-42c2-8cc0-5dbd86cbf19f","year":2023},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.220366Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:9d9c085e90c178e3a303a10f6d9d72d69238a8707643985d641bbf5e06307a4b","observation_id":"4136c42e-431c-4f72-8098-676f054e0c0b","resolution":{"observed_at":"2026-08-07T10:30:14.690626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.666542Z","title":"qualifire/Qualifire-prompt-injection-benchmark Dataset","venue":null,"work_id":"67a934e7-6343-48cc-8f6d-1df46388235b","year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.226536Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:f0558514d8f7b34fcedc386a2d35e5bbbad6f13f2a8e2d7f8c2b066c566ee569","observation_id":"28a7cdaf-448b-4325-b59c-a0f570b5a47e","resolution":{"observed_at":"2026-08-07T10:30:14.672057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.647642Z","title":"qualifire/prompt-injection-sentinel Model Card","venue":null,"work_id":"1550bc32-31df-4266-8251-b8746b5189cb","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.233229Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:a20471b59d0fa1e175989a8eb763ee75a714deba5c74214b2c3850240dc6d1cb","observation_id":"51adcf6a-515d-402c-a6ea-037be425012c","resolution":{"observed_at":"2026-08-07T10:30:14.653353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.611289Z","title":"reshabhs/SPML-Chatbot-Prompt-Injection dataset","venue":null,"work_id":"a9052a30-be44-4c29-894e-cdf35a188095","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.245204Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:372678169f77881f5035ee3f8a6f35e1fe32d061cde29e1e4a0c6dac481b18b0","observation_id":"095ff15e-c1ab-4af1-b509-1dd858ea3224","resolution":{"observed_at":"2026-08-07T10:30:14.617335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.576647Z","title":"VMware/open-instruct dataset","venue":null,"work_id":"c17e1f70-e67e-4e19-b2f0-9cce5af42074","year":null},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.269539Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:fb69448d4077a078a03aa4733e451bb98c9ca0aa3f71684bc53c8f3a447a3321","observation_id":"529255d9-c581-4388-b052-27358ba9f867","resolution":{"observed_at":"2026-08-07T10:30:14.582542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.871212Z","title":null,"venue":null,"work_id":"87b5ff84-8188-4ab6-991c-723a6413813c","year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.274423Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:400a82547808d166fb2578eb174815b74fa4726df8ee851f3791cfc052e81174","observation_id":"1bf8fcfb-e97f-4f87-a270-a0b38866436b","resolution":{"observed_at":"2026-08-07T10:30:14.876023Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.13663","last_updated":"2024-12-19T06:32:26Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-18T09:39:44Z","title":"Smarter, Better, Faster, Longer: A Modern Bidirectional Encoder for Fast, Memory Efficient, and Long Context Finetuning and Inference","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.13663","snapshot_observed_at":"2026-08-07T10:30:14.279458Z","title":"Smarter, better, faster, longer: A mod- ern bidirectional encoder for fast, memory efficient, and lo ng context finetuning and inference","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.279458Z"},"links":{"cited_paper":"/paper/2412.13663","citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:aac22f4ea8dd4c7c84279e5fa9ded47ba3917c09eb1a10a0b0f7f1c5f642852e","observation_id":"72ddb75a-7e99-45e4-914b-9b55344d81f7","resolution":{"observed_at":"2026-08-07T10:30:14.279458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.00843","last_updated":"2025-05-01T20:09:48Z","snapshot_observed_at":"2026-08-07T15:57:16.005461Z","submitted_at":"2025-05-01T20:09:48Z","title":"OET: Optimization-based prompt injection Evaluation Toolkit","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.00843","snapshot_observed_at":"2026-08-07T10:30:14.284471Z","title":"OET: An optimization-based evalua- tion toolkit for benchmarking prompt injection attacks and defenses","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.284471Z"},"links":{"cited_paper":"/paper/2505.00843","citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:a29ddd7509b000a77fbf6bca2d9c045855314a33d68b57c1ee2df8299be772be","observation_id":"533e6e12-6ca0-4dc5-a089-090fc9c83eed","resolution":{"observed_at":"2026-08-07T10:30:14.284471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:30:14.629353Z","title":"Please update URL if it changes","venue":null,"work_id":"ca264d8e-8b0d-464f-babd-e17e73b55357","year":2025},"citing_paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T10:30:14.239307Z"},"links":{"citing_paper":"/paper/2506.05446"},"observation_digest":"sha256:9d76430b1841714c50bcd59ea48fcd682028aba2e65c61a28517807c043e1f60","observation_id":"a4f13127-a63d-49d0-992b-0b8d4b1299ff","resolution":{"observed_at":"2026-08-07T10:30:14.634733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.05446","last_updated":"2025-06-05T14:07:15Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T10:23:21.957457Z","submitted_at":"2025-06-05T14:07:15Z","title":"Sentinel: SOTA model to protect against prompt injections"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":7,"verified_exact":0,"verified_fuzzy":18},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2506.05446."}